voodoo-badger's starred repositories
no-defender
A slightly more fun way to disable windows defender + firewall. (through the WSC api)
lcvr-to-timesketch
Pipeline to process LimaCharlie Velociraptor Triages in Timesketch
DefaultCreds-cheat-sheet
One place for all the default credentials to assist the Blue/Red teamers activities on finding devices with default password 🛡️
Telegram-OSINT
In-depth repository of Telegram OSINT resources covering, tools, techniques & tradecraft.
Offensive-OSINT-Tools
OffSec OSINT Pentest/RedTeam Tools
Prot1ntelligence
Protintelligence is a Python script for the OSINT and Cyber Community. This tool helps you to find intelligence on Protonmail users.
behind-this-website
Checklist for investigating the provenance and ownership of websites.
awesome-reMarkable
A curated list of projects related to the reMarkable tablet
BadBlood
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
PersistenceSniper
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
unleashed-firmware
Flipper Zero Unleashed Firmware
KQL-and-Workbooks
Sharing presentation slides and workbook templates that can be useful to others to learn more about Azure Active Directory!
Hunting-Queries-Detection-Rules
KQL Queries. Defender For Endpoint and Azure Sentinel Hunting and Detection Queries in KQL. Out of the box KQL queries for: Advanced Hunting, Custom Detection, Analytics Rules & Hunting Rules.
FalconFriday
Hunting queries and detections
SentinelKQL
Azure Sentinel KQL
Azure-Sentinel
Cloud-native SIEM for intelligent security analytics for your entire enterprise.
Sentinel-Queries
Collection of KQL queries
OffensiveVBA
This repo covers some code execution and AV Evasion methods for Macros in Office documents
Microsoft-eventlog-mindmap
Set of Mindmaps providing a detailed overview of the different #Microsoft auditing capacities for Windows, Exchange, Azure,...